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REMARKS/ARGUMENTS 

Prior to the entry of this Amendment, claims 1-18, 22-40, 42-45 and 47-49 were 
pending in this application. Claim 23 has been amended to correct a grammatical error only, no 
claims have been canceled, and no claims have been added herein. Therefore, claims 1-18, 
22-40, 42-45 and 47-49 remain pending in this application. Applicants respectfully request 
reconsideration of these claims for at least the reasons presented below. 

35 U.S.C. S 102 Rejection. Stolfo 

The Office Action has rejected claims 1-18, 22-40, 42-45 and 47-49 under 
35 U.S.C. § 102(e) as being unpatentable over U. S. Patent Publication Number 2004/0002903 of 
Stolfo et al. (hereinafter Stolfo). The Applicant respectfully submits the following arguments 
pointing out significant differences between claims 1-18, 22-40, 42-45, and 47-49 submitted by 
the Applicant and Stolfo. 

"A claim is anticipated only if each and every element as set forth in the claim is 
found, either expressly or inherently described, in a single prior art reference." MPEP 2131 
citing Verdegaal Bros. v. Union Oil Co. of California, 814 F.2d 628, 631, 2 USPQ2d 1051, 
1053 (Fed. Cir. 1987). Applicants respectfully argue that Stolfo fails to disclose each and every 
claimed element. For example, Stolfo fails to disclose, either expressly or inherently, receiving 
from a user of an integrated Identity System and Access System a request for the user to be a 
proxy for an administrator of the integrated Identity System and Access System. Furthermore, 
Stolfo does not disclose, expressly or inherently, allowing the user to use the Identity System as 
the administrator based on credentials of the administrator while allowing the user to use the 
Access System to access resources based credentials of the user but not the credentials of the 
administrator. 
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As discussed previously, Stolfo is directed to "transactions over a 
communications network between first and second parties . . . while securing private and 
personal information specific to the first party or the network device used by the first party with 
respect to the second party." (page 1, para. 1, lines 1-7) Under Stolfo, communications and/or 
transactions can be carried out between a user or first party, typically a consumer, and a second 
party, typically a merchant, over a communication network in which information is provided 
and/or a good is ordered while securing such information of the first party with respect to at least 
the second party, (page 4, para. 43) A user or first party may communicate over the network 
with a second party, using a proxy that anonymizing (i.e., making anonymous) the first party 
with regard to the second party, (page 4, para. 47) In other words, the proxy of Stolfo acts as a 
middleman that hides the identity of the first party from the second party, (page 16, para. 184 
and para. 1 87) 

Claim 1, upon which claims 2-18, 22, and 23 depend, is directed to a method for 
allowing proxies in an integrated Identity System and Access System. Claim 24, upon which 
claims 25-3 1 depend is directed to a processor storage device having code for programming a 
processor to perform a method. Claim 32, upon which claims 33-39 depend, is directed to an 
apparatus that allows for proxies in an integrated Identity System and Access System. Claims 1, 
24, and 32 each recite in part "receiving from a user of the integrated Identity System and Access 
System a request for the user to be a proxy for an administrator of the integrated Identity System 
and Access System." First of all, Stolfo makes no mention of an integrated Identity System and 
Access System. Furthermore, Stolfo does not disclose receiving a request from a user to be a 
proxy for an administrator of the integrated Identity System and Access System or any other 
system. Under Stolfo, a user may request the proxy system to act as a proxy for that user when 
interacting with the other/second party, i.e., to anonymize the first party with respect to the 
second party. That is, any request from the user under Stolfo would in effect be a request to 
"please be my proxy" or "please anonymize me." However, such a request, cannot be reasonably 
seen as teaching a request for a user to be a proxy for an administrator, i.e., a request to "please 
let me act as the administrator." 
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Claims 1, 24, and 32 go on to recite in part "associating said user with one or 
more credentials of said administrator without authenticating said user as said administrator." 
Stolfo does not disclose associating the user with one or more credentials of an administrator of 
an integrated Identity System and Access System or any other system either with or without 
authenticating the user as the administrator. The proxy of Stolfo associates the user/customer 
with an "identity" such as a "unique alphanumeric name that is supplied to the second party 
vendors" to identify the user to the second party, (para 47) However, this identifier, while 
providing anonymity to the user with respect to the second party, does not associate the user with 
one or more credentials of an administrator of the proxy, the second party's system, or any other 
system. 

Claims 1, 24, and 32 further recite in part "allowing said user to use said Identity 
System as said administrator based on said one or more credentials of said administrator; and 
allowing said user to use said Access System to access resources based on one or more 
credentials of said user but not the one or more credentials of said administrator." Stolfo does 
not disclose allowing the user to use an Identity System, or any other system, as an administrator, 
i.e., having the rights and privileges of the administrator within the Identity System, based on the 
one or more credentials of the administrator. Furthermore, Stolfo does not then allow the user to 
use an Access System to access resources based on one or more credentials of the user but not 
the one or more credentials of the administrator, i.e., to have only the rights and privileges of the 
user within the Access System. (See additionally Detailed Description page30, line 27 - page 31, 
line 5) Rather, Stolfo provides for anonymizing a first party with respect to a second party but 
does not allow the first party to use the proxy, second party's system, or any other system as an 
administrator. For at least these reasons, claims 1-18 and 22-39 are distinguishable from Stolfo 
and should be allowed. 

Claim 40, upon which claims 42-44 depend are directed to a method for allowing 
proxies in an integrated Identity System and Access System. Claim 45, upon which claims 47- 
49 depend, is directed to a processor storage device having code for programming a processor to 
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perform a method. Both claim 40 and 45 recite in part "receiving from an administrator of the 
integrated Identity System and Access System an indication that a user of the integrated Identity 
System and Access System can be a proxy for the administrator." Stolfo does not disclose 
receiving from an administrator of an integrated Identity System and Access System, or any 
other system, an indication that a user can be a proxy for the administrator. That is, Stolfo does 
not disclose an administrator of a system identifying a user or users that are authorized to act as 
proxy administrators. Rather, Stolfo provides for anonymizing a first party with respect to a 
second party but does not allow the first party to use the proxy, second party's system, or any 
other system as an administrator and does not disclose the administrator of such systems 
identifying a user that can be a proxy administrator. 

Claims 40 and 45 further recite in part "receiving an indication from said user to 
become said proxy for said administrator." Stolfo makes no mention of an integrated Identity 
System and Access System. Furthermore, Stolfo does not disclose receiving a request or 
indication from a user to be a proxy for an administrator of the integrated Identity System and 
Access System or any other system. As noted above, under Stolfo, a user may request the proxy 
to act as a proxy for that user when interacting with the other/second party. However, such a 
request, cannot be reasonably seen as teaching a request for a user to be a proxy for an 
administrator. 

Claims 40 and 45 also recite in part "accessing an Identity System cookie for said 
user, wherein said Identity System cookie stores an identification of said user; storing an 
identification of said administrator in said Identity System cookie for said user; allowing said 
user to use said Identity System as said administrator based on said identification of said 
administrator in said Identity System cookie for said user; and allowing said user to use said 
Access System to access resources based on an Access System cookie for the user, wherein the 
Access System cookie is separate from said Identification System cookie and the Access System 
cookie does not store an identification of said administrator." Stolfo does not disclose allowing 
the user to use an Identity System, or any other system, as an administrator based on an 
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identification of the administrator in an Identity System cookie or any other information. Rather, 
Stolfo provides for anonymizing a first party with respect to a second party but does not allow 
the first party to use the proxy, second party's system, or any other system as an administrator. 
For at least these reasons, claims 40, 42-45, and 47-49 are distinguishable from Stolfo and should 
be allowed. 



In view of the foregoing, Applicants believe all claims now pending in this 
Application are in condition for allowance. The issuance of a formal Notice of Allowance at an 
early date is respectfully requested. 

If the Examiner believes a telephone conference would expedite prosecution of 
this application, please telephone the undersigned at 303-571-4000. 

Respectfully submitted, 



TOWNSEND and TOWNSEND and CREW LLP 
Two Embarcadero Center, Eighth Floor 
San Francisco, California 941 1 1-3834 
Tel: 303-571-4000 (Denver) 
Fax: 303-571-4321 (Denver) 
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CONCLUSION 



William J. Daley 
Reg. No. 52,471 
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